Cisco - Introduction to New IP Switching Protocols 304

304 1055_05F9_c1

1

© 1999, Cisco Systems, Inc.

Introduction to New IP Switching Protocols Session 304

304 1055_05F9_c1

© 1999, Cisco Systems, Inc.

Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr

2

1

Agenda Cisco Express Forwarding

NetFlow Services

304 1055_05F9_c1

Tag/MPLS

3

© 1999, Cisco Systems, Inc.

NetFlow Infrastructure

Network Planning

Accounting/Billing

Flow Profiling

NetFlow/ Data Export

Flow Collectors

Partner Value Add

Network Monitoring

End-User Applications

When/What/Who/How Much/Where 304 1055_05F9_c1

© 1999, Cisco Systems, Inc.

Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr

4

2

NetFlow Services—Manageability/ Accounting NetFlow Statistics IP NetFlow Switching Cache, 29999 Active, 2769 Inactive, 58411388 Added Statistics Cleared 141949 Seconds Ago Protocol

Total Flows

Flows/ Sec.

Packets/ Flow

Bytes/ Pkt

Packets/ Sec.

Active Sec/ Flow

Idle Sec/ Flow

TCP—Telnet FTP FTPD WWW SMTP X BGP Other UDP—TFTP DNS Other ICMP IGMP IPINIP IP—Other TOTAL

267,034 1,030,837 554,967 32,107,858 3,526,231 9,600 111,096 5,729,172 2,398 12,875,077 1,489,072 665,771 5,144 4,450 2,693 58,381,400

1.8 7.2 3.9 226.2 24.8 0.0 0.7 40.3 0.0 90.7 10.4 4.6 0.0 0.0 0.0 411.3

233 10 164 15 13 121 14 70 3 2 30 13 18 933 11 20

75 78 345 247 159 129 77 220 62 110 293 259 278 377 136 227

439.3 76.6 641.3 3610.6 323.1 8.2 11.5 2858.1 0.0 195.4 321.8 62.8 0.6 29.2 0.2 8579.4

182.6 22.6 52.7 13.5 10.2 148.2 229.2 71.0 13.4 5.4 28.5 75.7 82.4 166.7 80.8 0.0

36.5 43.7 15.7 28.1 23.6 55.1 61.1 41.3 69.5 43.6 68.7 66.8 64.3 61.0 65.7 0.0

• Extensive statistics maintained on L3 device • Snapshot summary traffic characterization 304 1055_05F9_c1

5

© 1999, Cisco Systems, Inc.

Cache Management and Data Export Header • Sequence number • Record count • Version number

Flow Record

…

Flow Record

NetFlow Cache

• Flow cache manager expires flows No traffic/long life/TCP flags/cache full/etc.

• Intelligent cache aging ensures cache entries are always available • Distributed NetFlow Cache on VIPs • Router exports groups of expired flows every second • Export uses UDP datagrams with sequence numbers 304 1055_05F9_c1

© 1999, Cisco Systems, Inc.

Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr

6

3

NetFlow FlowCollector • Flow record reception • Data volume reduction NetFlow FlowCollector

Filtering Aggregation

• Flexible thread language • Flat file storage • File cleanup • Solaris, HP-UX and NT 304 1055_05F9_c1

Flow Consumer Applications

7

© 1999, Cisco Systems, Inc.

FlowCollector Aggregation Schemes Keys Schemes

Src Dest Src Dest Prot ToS Input Output Nexthop Src Dest Masked Masked Src Dest Addr Addr Port Port IF IF AS AS Src Addr Dest Addr Mask Mask

V1.0 SourceNode

•

DestNode HostMatrix

• •

• •

SourcePort DestPort

• •

Protocol DetailDestNode

•

•

•

•

•

•

•

•

•

•

DetailHostMatrix

•

•

DetailInterface

•

•

CallRecord

•

•

•

•

•

•

ASMatrix

•

•

•

•

V2.0 DetailSourceNode

•

DetailASMatrix

•

•

•

•

•

•

•

•

•

•

NetMatrix

•

•

•

•

Filtering—SA, DA, Nexthop, In/Out Interface, Source/Dest Source/Dest Port, ASN, ToS 304 1055_05F9_c1

© 1999, Cisco Systems, Inc.

Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr

8

4

New Features in FlowCollector Version 2.0 • New aggregation schemes DetailSourceNode, DetailASMatrix, NetMatrix

Version 3.0 (July ’99) • Support for v.8 exports • 8 additional aggregation streams

• Performance improvements

• Improved disk space management

• Support for v7 records (Cat5000 NFFC)

• Configuration and control API

• Supports VIP distributed NetFlow export

• High availability process monitoring on hosting workstation

• Router grouping • Export address filtering • Export record version autodetect • “show-tech” utility for debugging 304 1055_05F9_c1

9

© 1999, Cisco Systems, Inc.

NetFlow Server Solution • Central repository for NetFlow data • Post-collection aggregation and timebased consolidation • Reliable data collection • Secure data collection • RDMS with ODBC API • Single point of access for end-user applications • Target Q4 CY ’99 FCS 304 1055_05F9_c1

NetFlow Server

NetFlow FlowCollectors

© 1999, Cisco Systems, Inc.

Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr

Flow Consumer Applications

10

5

NetFlow Partner Example— Server Solution Internet Usage Platform Usage Management Program Members

Portal Kenan Belle

Systems Integration Program Members

Cap Gemini HP Consulting EDS 304 1055_05F9_c1

© 1999, Cisco Systems, Inc.

11

NetFlow FlowAnalyzer

NetFlow FlowAnalyzer NetFlow FlowCollectors

• • • • • •

Graphical display of NetFlow data Consumes from NetFlow FlowCollector(s) Time-based analysis and data sorting v2.0 is standalone Java application Histograms, bar charts, pie charts Spreadsheet data export

304 1055_05F9_c1

© 1999, Cisco Systems, Inc.

Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr

12

6

New Features in FlowAnalyzer Version 2.0 • Search operations Address-to-Address transactions Address to Subnet transactions Subnet to Subnet transactions Address “away from” Address/Subnet transactions

Version 3.0 (July ’99) • NetFlow collector control • Tag Matrix Statistics (TMS) data collection control and analysis • View on-router aggregation schema data

• Multiple router or dataset selection • Detail AS Matrix aggregation and drilldown • Standalone Java application • DNS address and AS number to name translation 304 1055_05F9_c1

© 1999, Cisco Systems, Inc.

13

NetFlow Feature Acceleration • NetFlow is leveraged to accelerate specific Cisco IOS® features, including: NetFlow Policy Routing (NPR) Router-based Network Data Encryption Network Address Translation (NAT) Committed Access Rate (CAR) Web Cache Control Protocol (WCCPv2) Others 304 1055_05F9_c1

© 1999, Cisco Systems, Inc.

Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr

14

7

NetFlow Policy Routing (NPR) • Powerful traffic engineering tool • ISP and/or application selection

E.g. ERP

Application

• IP precedencebased QoS 304 1055_05F9_c1

E.g.

E-mail

NPR

FEC

NPR

• Distributed performance and flow acceleration

Standard ISP

Premium ISP

Enterprise Backbone

15

© 1999, Cisco Systems, Inc.

NetFlow Summary • NetFlow is a scalable and high-performance network traffic accounting feature built into Cisco IOS switching paths • NetFlow is Cisco IOS software and external middleware utilities Partners—Solect, HP, Belle, Portal, Netscout, Concord, X-Cel, XaCCT, Apogee, etc.

• NetFlow enables usage-based, QoS-based, etc. billing • NetFlow provides advanced feature acceleration and is integrated with CEF • Customer tool development—ANS and BBN Cflowd http://engr.ans.net/cflowd/index.html 304 1055_05F9_c1

© 1999, Cisco Systems, Inc.

Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr

16

8

Cisco IOS IP Switching Services Cisco Express Forwarding

NetFlow Services

304 1055_05F9_c1

Tag/MPLS

17

© 1999, Cisco Systems, Inc.

Cisco Express Forwarding (CEF) • Rationale—changing Internet traffic/topology dynamics required optimized L3 switching paradigm for IP: Traffic Driven

Topology Driven

• Stable traffic patterns • Performance fluctuations • Demand caching

• Dynamic environment • Predictable, scaleable, performance • Full topology forwarding

NetFlow Services • Deployed at Backbone Periphery for Network Services: Traffic Accounting QoS Policy

Cisco Express Forwarding • Deployed at Network Core for: Performance Scalability Quality of Service

Security 304 1055_05F9_c1

© 1999, Cisco Systems, Inc.

Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr

18

9

CEF—Benefits • Performance Implements Cisco patented expedited IP address lookup

• Scalability Full L3 topology distributed, local on-card route processing

• Resilience Consistent switching performance even during major topology changes/network convergence

• Advanced functionality switching E.g. accounting, Class-of-Service, security/DoS prevention via RPF checking, tunneling etc. 304 1055_05F9_c1

19

© 1999, Cisco Systems, Inc.

CEF—Significance Consolidated Switching Path

Basis for L3 Quality-of-Service L3 Committed Access Rate

Process Switching Fast Switching Optimum Switching

Distributed WFQ and/or wRED

CEF Switching

Cisco IOS 12.0 and Forward

Load Balancing

Cisco Express Forwarding (with NetFlow Analysis)

IP Packet Arrives

IP Packet Departs

Across all Cisco IOS Platforms C6000 C7500

GSR

C3600 AS5800 C1720

Full Performance Per Packet/Destination 304 1055_05F9_c1

© 1999, Cisco Systems, Inc.

Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr

C2600

20

10

Distributed CEF—e.g. dCEF on the C7500 C7500 Distributed Architecture—1996

C7500 Distributed Architecture—1999

Route Switch Processor

Route Switch Processor Forwarding Information Base

Routing Table

Cisco IOS Investment CyBus

Port

First Packet ‘Process Switched’

Subsequent Packets ‘Fast Switched’

• Adjacency table:

Port

FIB

Distributed

Table

Adjacency

Adapter

Versatile Interface Processor

Versatile interface Processor Port

Adapter

All Packets Forwarded via Switching Line Cards

• Forwarding information base:

IP Address L2/MAC mapping Populated by ARP Maintains counters/statistics Adjacencies defines as normal, null, receive, punt, incomplete etc. 304 1055_05F9_c1

Adapter

FIB

Distributed Forwarding Cache

Versatile Interface Processor Distributed

Distributed Forwarding Cache

Versatile Interface Processor Table

Distributed Forwarding Cache

CyBus Protection

FIB

Versatile Interface Processor

Adjacency

Versatile Interface Processor

Distributed

Versatile Interface Processor

Table

Forwarding Cache

Adjacency

Routing Table

Constructed by routing process Foundation for Tag Information Base (TIB)

21

© 1999, Cisco Systems, Inc.

Cisco IOS IP Switching Services Cisco Express Forwarding

NetFlow Services

304 1055_05F9_c1

© 1999, Cisco Systems, Inc.

Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr

Tag/MPLS

22

11

Cisco IOS Tag Switching/MPLS • Original rational—integrate: Layer 3 routing—scalability and flexibility Layer 2 switching—high-performance and traffic management

+

=

• Now architecture for new services… 304 1055_05F9_c1

23

© 1999, Cisco Systems, Inc.

Tag Switching—‘The Big Picture’

• Without Tag Switching

• With Tag Switching

Layer 2 ATM or Frame Relay core with routers All routers are neighbors hence single link failure = N(squared) peer failures Complex ‘overlay’ model Traffic driven SVC signaling performance issues or PVC mapping overhead Future scalability limitations 304 1055_05F9_c1

© 1999, Cisco Systems, Inc.

Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr

Tag switching core (frame or cell) with tag routers Tag switches are logical networking peers All packets tagged—topology driven, not traffic driven Minimizes signaling overhead Hence a highly scaleable solution

24

12

Tag/MPLS Switching—Example Local Remote Address Tag Tag Prefix Interface

Local Remote Address Tag Tag Prefix Interface

X

1

128.89

1

X

2

171.69

1

..

…

…

Tag Information Base

1

7

128.89

0

2

5

171.69

4

3

…

…

128.89 0 I/f 1 I/f 4

171.69.12.1 Data

2 171.69.12.1 Data Untagged Data

171.69

5 171.69.12.1 Data

171.69.12.1 Data

CEF Forwarding Table Populated with Routing Topology Information

Untagged Data

Each Route/Prefix Mapped to a Tag Value Switching Decision Then Only ‘Label-Swaps’ via the Tag Information Base (TIB) 304 1055_05F9_c1

© 1999, Cisco Systems, Inc.

25

Cisco IOS Tag/MPLS—Benefits

• Scalability! • Feature transparency IP and ATM

• Inherent Quality of Service support Premium tags, IP precedence mapping, wRED etc.

• Traffic Engineering • Facilitates L3 VPNs Using selective advertisement policy and VPN tag paths 304 1055_05F9_c1

© 1999, Cisco Systems, Inc.

Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr

26

13

Tag/MPLS Traffic Engineering • Create ‘traffic trunks’ Traffic forwarded on the same path/with same CoS

• Tag Switched Path (TSP) taken is pre-established via RSVP Routing with Resource Reservation (R 3)

• IGP extensions (IETF drafts) disseminate resource information • Dynamic reroute in case of failure Flexible policy control, load balancing 304 1055_05F9_c1

27

© 1999, Cisco Systems, Inc.

Traffic Engineering R8

R9 R3 R4 R2

Pop

R5

R1

32 49 17

R6

R7

22

Setup: Path (R1->R2->R6->R7->R4->R9) Reply: Resv Communicates Tags and Reserves Bandwidth on Each Link 304 1055_05F9_c1

© 1999, Cisco Systems, Inc.

Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr

28

14

Tag/MPLS—Foundation for L3 VPNs • VPNs uniquely defined via Tag + VPN ID therefore decoupling forwarding from IP addressing

Enterprise B

Enterprise A

Internet Backbone— “VPN 0” Intranet VPN 10 Extranet VPN 20

• Data privacy via logically separated tag switched paths • Quaility-of-Service (Tag CoS) • Provides IP address uniqueness

Enterprise B Enterprise A

• Eliminates tunnel mesh 304 1055_05F9_c1

Enterprise C

29

© 1999, Cisco Systems, Inc.

VPN-Aware Network Routing Architecture 1. SP network uses an IGP to exchange local reachability

iBGP

2. CEs (customer edge) and Pes (provider edge) exchange routing info (IP) 3. PEs exchange VPN routing info and tag bindings (VPN-IP) via mBGP (RFC2283) 4. TDP is used to bind tags to routes in the core 304 1055_05F9_c1

PE

IGP (e.g. OSPF)/TDP

© 1999, Cisco Systems, Inc.

Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr

eBGP/ Static/RIP

CE

30

15

Tag VPN—Network Formation Cust A 10.1.1 VPN 15

Controlled Route Distribution via Selective Advertisement

(15)10.1.1 Internet Scale VPN

Private View

Cust A 10.2.1 VPN 15

(15)10.2.1

(354)128.24.1

(15)10.3.1 Public View

(354)128.24.2

Cust A 10.3.1 VPN 15

Private View

Forwarding Examples Cust B 128.24.1 VPN 354 304 1055_05F9_c1

IN

OUT

(15)10.2.1

(15)10.1.1 (15)10.3.1

(354)128.24.2

(354)128.24.1

Cust B 128.24.1 VPN 354

31

© 1999, Cisco Systems, Inc.

Questions? TM

304 1055_05F9_c1

© 1999, Cisco Systems, Inc.

Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr

32

16

And for Your Copious Free Reading Time

• http://www.cisco.com/warp/public/732/Tech/ • http://www.cisco.com/warp/public/732/netflow/nflow_wp.htm • http://www.cisco.com/warp/public/732/Releases/cef_wp.htm • www.cisco.com/tag • www.cisco.com/vpn • http://www.ietf.org/html.charters/mpls-charter.html3

304 1055_05F9_c1

33

© 1999, Cisco Systems, Inc.

Please Complete Your Evaluation Form Session 304

304 1055_05F9_c1

© 1999, Cisco Systems, Inc.

Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr

34

17

304 1055_05F9_c1

© 1999, Cisco Systems, Inc.

Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr

35

18